CmdID

CmdID / Files

dsmod.exe

Microsoft AD DS/LDS modification command line utility file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dsmod.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft AD DS/LDS modification command line utility

2 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dsmod.exe · signed by Microsoft Windows

a5f9d49b28f89e9c260fc0706fd7c1c3b5b4824a684724f07bb0423aee9559dd

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dsmod.exe · signed by Microsoft Windows

dc8001ba719db2e8959caeefdb1538b6427b453eff592f0b679600c2c8560cb5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.